立即与支持人员聊天
与支持团队交流

Security Explorer 9.9.2 - User Guide

Getting Started with Security Explorer Managing permissions Searching Managing security Managing objects
Managing folders and files Managing shares Managing registry keys Managing services Managing tasks Managing groups and users Managing Favorites Managing Enterprise Scopes Updating licenses Managing network drives
Working with Microsoft SQL Server Working with Microsoft Exchange
Checking minimum requirements Viewing Exchange permissions Granting Exchange permissions Revoking Exchange permissions Cloning Exchange permissions Searching for Exchange server objects and permissions Backing up and restoring Exchange server security Modifying Exchange permissions Managing Exchange group memberships Exporting Exchange security permissions Creating Exchange databases Creating public folder mailboxes Managing Exchange administrators Managing Exchange distribution groups Managing mail contacts Managing mail users Managing mailboxes Managing mailbox folders Managing public folders Using role based access control Setting options for Exchange security
Working with Microsoft SharePoint Working with Access Explorer Working with Microsoft Active Directory Customizing Security Explorer Using the command line Using PowerShell cmdlets Troubleshooting

Scheduling a backup

If you would prefer to run the backup at a set time, schedule it as a Windows® task.

 
* 
NOTE: The Backup Scheduler is available only in the NTFS Security, Share Security, Registry Security, SharePoint Security, SQL Security, Exchange Security, and Active Directory modules.
To schedule a backup
1
Create the backup job. See Backing up security.
2
Type a name for the job in the Job Name box, and click Schedule.
The Schedule a Backup dialog box opens. Depending on if the backup job is local or remote, the appropriate option is selected.
 
Table 3. Backup options
Option
Description

Local Backups

If the backup paths are local, the Create single scheduled task on local machine check box is selected. The Job Name, Wildcard, and Backup Name carry over from the previous screen.

In the Account box, browse to locate an account under which to run the backup. If you do not enter an account, the backup runs under the local system account.

Remote Backups

If the backup paths are on remote computers, select Create separate scheduled task(s) on remote machine(s). The Job Name, Wildcard, and Backup Name carry over from the previous screen.

To create a scheduled task on remote computers
1
Double-click a job, or select a job, and click Edit. The Edit dialog box opens displaying the Job Name, Wildcard, and Backup Name from the previous screen.
2
Make any needed changes to the backup job.
3
In the Account box, browse to locate an account under which to run the backup.
4
To copy the changes to all remote scheduled jobs, click Copy to All. A warning box appears.
5
Click Yes to continue.
3
To set an auto-pause time for the backup task, select the Auto-Pause Time check box and set a time. The task will automatically pause at the time you set, and will automatically resume when the task runs again.
4
Click Schedule. The task is assigned the default run time of Weekly, every Monday at midnight.
 
* 
NOTE: To change the run time, edit the backup using the Backup Scheduler. See Using the backup scheduler.
NOTE: Errors that occur during the task are captured in the Windows Event Log.

Using the backup scheduler

The Backup Scheduler provides a convenient place in which to create, edit, and delete backup jobs.

 
* 
NOTE: The Backup Scheduler is available only in the NTFS Security, Share Security, Registry Security, SharePoint Security, SQL Security, Exchange Security, and Active Directory Security modules.
TIP: You can use the Scheduled Backups basic task to manage scheduled backups.
To use the Backup Scheduler to schedule a backup
1
Select Security | Backup Scheduler.
-OR-
Click on the Tool Bar; or right-click an object, and choose Backup Scheduler.
The Backup Scheduler Task List box lists the currently defined backup jobs in ascending alphabetical order by computer name.
To sort the columns, click the column heading for ascending order and again for descending order.
2
To create a new backup job, click New. See Using the Browse tab to back up security.
3
Click Schedule.
4
Click Close.

Restoring security

You can restore your permissions from a backup file created by using the Backup function. You can restore some or all of the backup file. You can restore to multiple paths. Prior to initiating the restore process, you can verify the permissions against the current permissions.

 
* 
NOTE: The Restore function is available only in the NTFS Security, Share Security, Registry Security, SharePoint Security, SQL Server Security, Exchange Security, and Active Directory Security modules.
TIP: You can use the Restore basic task to select a backup file to restore. After you locate the backup file and click OK, the Restore Security dialog box opens with the Backup File box populated.
To restore a backup file
1
Open the module that is associated with the object[s] you want to restore.
2
Open the Browse tab.
3
Select Security | Restore Security.
-OR-
Click on the Tool Bar; or right-click an object, and choose Restore Security.
4
In the Backup File box, type the full path and name for the backup file, or click Load to locate a backup file. The contents of the backup file display in the left pane.
5
Expand the backup file and examine the contents. You can choose specific objects to restore by selecting the box next to the object. Use De-select all children and Select all children to help you select objects to restore.
 
* 
NOTE: When restoring from the Share Security, Registry Security, SharePoint Security, SQL Server Security, and Active Directory modules, the check boxes and the Advanced button are unavailable. The Restore to different paths check box is available in the SharePoint Security module. The Restore permissions check box is selected by default.
 
Table 4. Restore options
Option
Description

Show differences (folders and files only)

Applies to NTFS Security module only. Select to show the folders and files that have different permissions than the ones in the backup file. If you select this check box, a message box displays.

If you click Yes to proceed, the backup file reloads. If the permissions for a folder or file are different than those in the backup file, the name displays in red in the tree. Any differences between the current permissions and the backed up permissions are highlighted in yellow.

NOTE: To compare permissions of two folders, see Comparing security.

Include files when previewing backup

Applies to NTFS Security module only. Select to include files in the display. By default, only folders display. If you select this check box, the backup file reloads to display all the files.

NOTE: Only select this check box if you are restoring a small number of individual files. If you are restoring a large number of objects, selecting this check box can slow the loading of the backup file.

Restore owner

Restore permissions

Applies to NTFS Security module only. By default, both the owner and permissions are restored. Clear the appropriate check box for the item you do not want to restore.

Restore missing folders

Applies to NTFS Security module only. Select to recreate folders that are present in the backup file, but are no longer present in the destination path.

Restore SACL

Select to restore System Access Control List (SACL). Available only if SACL was included in the backup. See Backing up security.

Restore to different paths

Applies to NTFS Security, SQL Security, and SharePoint Security modules only. Select to restore the permissions to different paths.

Browse to locate a path. Repeat to add additional paths if desired. Each path you select appears in the drop-down list.

NOTE: If you want to restore to a single path, select the path from the drop-down list.

When you click Restore, you can choose to restore to the path displayed in the box, or to all paths listed in the drop-down list.

IMPORTANT: Applies to NTFS and SQL Security modules only. The alternate restore location must have the same structure as the backup file.
IMPORTANT: Applies to SharePoint Security module only. If the alternate restore location does not have the same structure as the backup file, only the permissions for identical site items are restored. All other permissions are ignored.
6
Available only in the NTFS Security module. Click Advanced to set more options for the restore process. See Setting advanced options for the restore process.
7
Click Restore. See Completing a process.
* 
NOTE: If you selected to restore to a different path, you are asked if you want to restore to the selected path that displays in the box, or to all paths in the drop-down list.

Setting advanced options for the restore process

Available only in the NTFS Security module. On the Advanced Restore Settings dialog, you can filter the back up file to help you find permissions to restore. You also can select how the permissions are restored.

To set advanced options for the restore process
1
On the Restore Security dialog (see Restoring security), click Advanced to set more options for the restore process.
2
To help you find and select parts of the backup file to restore, you can filter the path and the accounts.
 
* 
NOTE: The Path Filter wildcards are applied to the selection first, and the Permission Accounts wildcard is applied second.
Filtering the path
Filter the path if the backup file is exceptionally large, say over 1,000,000 paths. If you try to load the full tree, the process could be slow, so you might want to load only the portion of the backup file that you plan to restore.
In addition to the default option of filtering all the paths, you can choose to apply the filters to root paths only. This option is useful if you have a large number of root paths in your backup, i.e., a flat list of paths. Alternatively, you can apply the filters to all paths except the root paths. This option is useful if you have a large backup in a more complicated tree-like structure.
You can use multiple wildcards, separated by commas. Use the * wildcard to match any number of characters. Use the ? wildcard to match a single character.
 
Table 5. Path wildcard examples
Selected Paths
Wildcard = *docs
Wildcard = *test*
Wildcard = *test?

Folder1 = c:\work

skipped

skipped

skipped

Folder2 = c:\work\docs

restored

skipped

skipped

Folder3 = c:\work\test

skipped

restored

skipped

Folder4 = c:\work\test1

skipped

restored

restored

Folder5 = c:\work\test2

skipped

restored

restored

Filtering permission accounts
Filtered out permissions do not display and are not restored. Use the * wildcard to match any number of characters. Use the ? wildcard to match a single character. For example, *smith will skip any group or user that does not include smith in the path. To select a group or user, click Advanced User Selection.
3
Select the restore mode.
You can overwrite all permissions, restore permissions only for accounts from the backup file, or add permissions from the backup file to the existing permissions. In any case, the restore process skips paths for which no permissions are loaded from the backup, so those permissions remain unchanged.
4
Select the scope mode.
You can restore permissions for only the paths and subpaths that are visible and selected in the tree, or for all subpaths of the paths selected in the tree, including those that are filtered out or not selected.
5
Click OK.
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级